xanderbailey opened a new issue, #4011: URL: https://github.com/apache/iceberg-python/issues/4011
The AGS1 block layout has to be derived from the trusted file_length in StandardKeyMetadata rather than a filesystem stat, otherwise an attacker can drop trailing blocks and every remaining block still authenticates. The reader should fail when file_length is missing, or when it disagrees with the bytes that are actually readable, matching iceberg-rust after apache/iceberg-rust#3236. Part of #3222 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
